lyra
b89070e985
Documentation: - Create CHANGELOG.md with full version history (v0.0.1 through unreleased) - Rewrite README with comprehensive setup guide, configuration reference, architecture overview, security model, and feature list - Update ROADMAP.md: fix branch status table, mark completed security review items, update TOTP leeway description - Fix 'centeral' typo in docs/Caddyfile - Remove TODO comment from docs/compose.yaml - Add DESIGN_CONSIDERATIONS.md (design review document) Code quality: - Extract duplicated cookie name/domain logic into CookieNameTrait methods: sessionCookieName() and sessionCookieDomain() - Update AcceptListener, AllowListener, InterceptListener, and LoginManager to use the shared methods - Remove fragile cross-file coupling comment between LoginManager and InterceptListener Error handling: - Wrap cache operations in AcceptListener and AllowListener with try/catch to fail closed (don't authenticate on cache errors) - Log cache errors at error level instead of propagating as 500s - Early return pattern in AcceptListener and AllowListener for cleaner control flow
23 lines
597 B
YAML
23 lines
597 B
YAML
services:
|
|
preauth:
|
|
env_file:
|
|
# rename "example.env" to ".env", edit as needed
|
|
# strongly recommend setting TOTP_URI, if not provided the app
|
|
# will generate one for you, please copy it into your .env file
|
|
- .env
|
|
expose:
|
|
- 80
|
|
image: digitaladapt/preauth:latest
|
|
restart: unless-stopped
|
|
# if you wish to set the user, you must make sure that the user
|
|
# can write to /config and /data within the container
|
|
#user: <uid>:<gid>
|
|
volumes:
|
|
- preauth-config:/config
|
|
- preauth-data:/data
|
|
|
|
volumes:
|
|
preauth-config:
|
|
preauth-data:
|
|
|